Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rG0Ql2_Y9U67vOOo0co15KcUuPw.roa
File: rG0Ql2_Y9U67vOOo0co15KcUuPw.roa (raw, json)
Hash identifier: /EYTbw1ygArI1vmK1cugKiPyhd6F+xOMRCul1Q0wViY=
Subject key identifier: AC:6D:10:97:6F:D8:F5:4E:BB:BC:E3:A8:D1:CA:35:E4:A7:14:B8:FC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C53A6A9FC33CF61E9A676A0EBC5B7EC99
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rG0Ql2_Y9U67vOOo0co15KcUuPw.roa
Signing time: Sun 10 Dec 2023 12:14:40 +0000
ROA not before: Sun 10 Dec 2023 12:14:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:a6:a9:fc:33:cf:61:e9:a6:76:a0:eb:c5:b7:ec:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 12:14:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac6d10976fd8f54ebbbce3a8d1ca35e4a714b8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:3f:88:11:cf:58:d9:16:c8:db:72:55:2e:
bf:27:84:ae:2f:9f:79:8b:dd:5f:c8:a0:72:92:42:
31:75:e3:93:f4:09:4b:ea:e5:87:79:30:84:06:79:
8b:aa:af:8d:4b:30:d8:a0:ca:d2:8c:c2:67:a8:86:
be:a9:88:5a:bb:64:50:7f:ea:f0:21:9e:58:c9:17:
ff:a8:a1:3b:19:9f:94:9c:15:07:10:8e:fa:90:6a:
0c:f6:f7:f0:25:a5:b4:6b:6c:ec:2f:4d:94:3f:d8:
5e:97:68:9d:2b:b1:02:d1:66:d0:51:94:51:25:26:
9e:21:7c:8e:2a:96:35:d0:63:6a:24:6f:7e:48:6e:
41:38:81:be:13:63:10:19:eb:95:72:2c:f2:2b:bf:
bc:49:0a:08:8d:20:0c:7f:9e:79:07:f2:8d:34:8d:
aa:66:a9:94:4c:e3:8d:ac:45:cd:7d:8b:e6:87:9a:
92:56:40:9b:6f:54:a4:b0:cb:31:0a:bc:4b:a9:8c:
42:29:92:1a:17:71:43:81:29:db:3c:45:a8:ec:72:
c9:a3:83:34:71:ba:0d:bb:fe:35:6d:c5:02:0d:12:
b6:d2:b8:7a:26:c4:7d:2c:5e:51:fe:20:3b:2f:99:
97:b0:bf:47:c9:aa:5a:b5:cd:bf:33:a3:20:0c:8b:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6D:10:97:6F:D8:F5:4E:BB:BC:E3:A8:D1:CA:35:E4:A7:14:B8:FC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rG0Ql2_Y9U67vOOo0co15KcUuPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:e8:62:8c:2e:2a:19:41:06:c5:83:97:d5:6e:e2:53:37:56:
19:ff:9f:44:17:49:38:05:30:d1:1b:c6:2b:ec:17:c0:90:8f:
d2:75:e8:c8:01:ec:1a:3b:07:6c:e1:63:53:12:48:fc:f3:5b:
e3:64:cb:81:f3:dc:84:19:45:0c:52:4c:bb:84:80:0d:e9:78:
34:04:9e:20:34:57:6b:36:62:29:62:d8:7b:8f:4f:41:c0:6f:
e8:1a:05:9b:a0:b6:2c:f1:83:6c:57:a2:1d:13:a7:e4:ef:3b:
b7:09:0c:c6:a5:e9:d8:e5:88:85:2a:25:0e:c0:4b:b5:7d:42:
06:27:a3:10:0d:bd:77:ca:e5:a4:61:77:bb:8d:7a:10:41:50:
de:42:ee:d5:bd:e3:60:ef:3a:20:42:61:b3:31:77:08:d2:c9:
66:83:c5:11:33:cd:97:21:4e:7a:49:0a:ad:01:fc:9e:2d:31:
57:25:99:14:c8:4f:2a:c1:8b:67:a4:c5:ec:11:bb:ca:ef:12:
a9:e9:44:28:f9:3d:e7:d1:6e:c0:03:e6:fd:80:ec:25:c8:44:
e0:91:ff:47:c3:f1:85:7c:18:aa:65:94:1c:20:32:c8:0e:3c:
fb:af:bc:7a:be:fa:19:b3:f7:cb:00:91:ea:e4:08:4a:ed:9c:
85:4a:1c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:57:59 2025 by rpki-client